This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: f7TAewFvvUd8miVlbLgh4xwTQ40ELNa1R35dzSssiD4= Subject key identifier: 0A:6F:25:48:69:8D:CB:83:8C:1E:7A:31:37:6C:FF:FA:35:7C:3E:AA Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 6A5F5460E537322C01A99CCF67032F06CCDFD802 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 0147 Signing time: Sat 20 Dec 2025 15:50:00 +0000 Manifest this update: Sat 20 Dec 2025 15:45:00 +0000 Manifest next update: Wed 24 Dec 2025 00:44:00 +0000 Files and hashes: 1: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) 2: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: Km42l6acKU8VzNIlIeHA4gGZn5JewKMsi3hDXNThoeg=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 4: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5f:54:60:e5:37:32:2c:01:a9:9c:cf:67:03:2f:06:cc:df:d8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Dec 20 15:45:00 2025 GMT Not After : Dec 24 00:44:00 2025 GMT Subject: CN=0A6F2548698DCB838C1E7A31376CFFFA357C3EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:b1:a2:71:b8:65:a1:e5:52:6b:fc:e4:b4: 4d:7f:95:6e:3b:4c:99:61:7f:3f:34:20:83:96:9d: 49:e6:27:4f:c1:57:40:90:ec:f7:77:df:47:27:f0: 38:a0:04:eb:27:3b:af:9d:81:86:de:a7:d9:e0:4a: 87:79:5f:3b:ce:f7:4b:25:92:b0:8d:cc:e8:4e:a3: 81:60:8b:15:7b:c9:f8:7a:4e:87:7f:04:b0:aa:fb: 4e:4b:3c:f2:3c:1a:1a:0b:37:6c:d2:d8:f0:1c:fc: 3a:67:aa:9f:c4:00:6c:72:45:a7:28:6e:a4:1f:78: 6f:26:e0:4c:53:ac:f1:3c:b3:e7:46:02:e0:cb:98: 71:c7:45:84:0d:7d:d9:a1:57:17:ce:35:37:33:7d: 12:3f:66:1e:42:e5:0f:d5:55:33:8b:73:0b:4d:cd: 86:18:c4:b9:b6:bc:81:05:6e:cb:29:e8:4d:8e:e4: b6:ca:86:4e:53:44:1d:71:4d:97:8c:46:74:e9:48: 16:49:de:06:71:53:30:5f:cf:8a:53:5a:89:fa:67: 9d:6d:36:47:42:be:ba:22:bd:11:09:d9:fa:91:de: 86:f7:dc:d9:32:d5:d8:6c:c8:58:3a:5b:95:80:7d: 4f:3f:98:14:ba:91:69:13:75:38:29:21:79:f7:be: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6F:25:48:69:8D:CB:83:8C:1E:7A:31:37:6C:FF:FA:35:7C:3E:AA X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:19:5f:c7:09:17:94:a2:9d:88:c8:1f:b0:bc:15:0e:b8:97: 92:66:41:3d:b3:69:2c:4d:a5:a9:4f:3a:6f:46:70:d2:57:47: dd:2c:5e:dc:e3:de:69:12:a1:99:51:b1:5f:58:f0:2a:53:d1: 3c:84:7e:7a:c2:ed:e7:ef:de:fc:b0:ff:52:b4:84:42:ca:8c: 33:c0:d1:5d:7e:fa:05:1f:58:e5:28:76:67:b3:e7:21:fb:51: 8e:4a:9e:79:38:f3:28:90:38:6d:5d:9c:c3:5d:df:97:1b:42: 12:87:88:3d:85:9b:bb:83:1e:f5:f6:43:10:65:76:c8:e0:b6: 14:20:a1:3b:cd:71:db:97:3f:1f:dc:99:72:22:18:be:bb:59: dc:f0:41:2f:c2:43:35:2b:e5:a5:b1:68:05:01:75:8a:64:4c: 55:88:97:ae:6a:52:1a:0f:bc:66:13:72:ca:9c:be:d6:60:77: 27:b8:1f:d4:15:1f:0a:16:be:ab:aa:e9:bc:3e:98:63:a4:94: 2d:ae:57:cd:0c:c9:96:62:af:49:67:69:71:86:78:76:d6:91: ee:b8:88:05:0c:92:f0:4d:f4:66:b0:81:9a:eb:e3:49:23:c2: 81:a2:9e:1f:1b:1b:6a:b4:ab:6b:1c:c2:ad:96:f2:f3:fa:7f: 14:cf:2a:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUal9UYOU3MiwBqZzPZwMvBszf2AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNTEyMjAxNTQ1MDBaFw0yNTEyMjQwMDQ0MDBaMDMxMTAvBgNV BAMTKDBBNkYyNTQ4Njk4RENCODM4QzFFN0EzMTM3NkNGRkZBMzU3QzNFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8BLGicbhloeVSa/zktE1/lW47 TJlhfz80IIOWnUnmJ0/BV0CQ7Pd330cn8DigBOsnO6+dgYbep9ngSod5XzvO90sl krCNzOhOo4FgixV7yfh6Tod/BLCq+05LPPI8GhoLN2zS2PAc/Dpnqp/EAGxyRaco bqQfeG8m4ExTrPE8s+dGAuDLmHHHRYQNfdmhVxfONTczfRI/Zh5C5Q/VVTOLcwtN zYYYxLm2vIEFbssp6E2O5LbKhk5TRB1xTZeMRnTpSBZJ3gZxUzBfz4pTWon6Z51t NkdCvroivREJ2fqR3ob33Nky1dhsyFg6W5WAfU8/mBS6kWkTdTgpIXn3vl/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCm8lSGmNy4OMHnoxN2z/+jV8PqowHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsZX8cJF5SinYjIH7C8FQ64l5JmQT2zaSxN palPOm9GcNJXR90sXtzj3mkSoZlRsV9Y8CpT0TyEfnrC7efv3vyw/1K0hELKjDPA 0V1++gUfWOUodmez5yH7UY5Knnk48yiQOG1dnMNd35cbQhKHiD2Fm7uDHvX2QxBl dsjgthQgoTvNcduXPx/cmXIiGL67WdzwQS/CQzUr5aWxaAUBdYpkTFWIl65qUhoP vGYTcsqcvtZgdye4H9QVHwoWvquq6bw+mGOklC2uV80MyZZir0lnaXGGeHbWke64 iAUMkvBN9GawgZrr40kjwoGinh8bG2q0q2scwq2W8vP6fxTPKgQ= -----END CERTIFICATE-----Generated at Sun Dec 21 02:01:24 2025 by rpki-client